Vendors / ibexa Records 14 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2 CVSS 9.0–10.0
CVSS high 5 CVSS 7.0–8.9
Exploited now ibexa records in CISA KEV No ibexa vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 39
Incorrect access control in the REST API of Ibexa & Ciril GROUP eZ Platform / Ciril Platform 2.x allows unauthenticated attackers to access sensitive data via enumerating object IDs.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00278 · Published 2026-03-06 · No fix listed CWE-284
Priority LOW 35
An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00862 · Published 2023-03-12 · Fixed in 7.5.30, 1.3.26 CWE-269
Priority LOW 18
An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19.
CVSS 3.1 LOW 3.7· Network · No auth · No interaction · EPSS 0.00458 · Published 2023-03-12 · Fixed in 1.3.19, 7.5.29 CWE-362
Open these records in search → All records by CVSS severity
Critical2 High5 Medium6 Low1 No CVSS0